- (Topic 3)
You need to decrypt customer data to provide it to an application. When you run the decryption command, you get the output below. Why does the response not directly reveal the cleartext data?
$ vault write transit/decrypt/phone_number ciphertext="vault:v1:tgx2vsxtlQRfyLSKvem..." Key Value
--- -----
plaintext aGFzaGljb3JwIGNlcnRpZmllZDogdmF1bHQgYXNzb2NpYXRl
Correct Answer:B
- (Topic 5)
How many Shamir's key shares are required to unseal a Vault instance?
Correct Answer:D
- (Topic 2)
True or False? To prepare for day-to-day operations, the root token should be safely saved outside of Vault in order to administer Vault.
Correct Answer:B
- (Topic 2)
Which of the following statements are true about HCP Vault Dedicated? (Select three)
Correct Answer:BCD
- (Topic 2)
An application has authenticated to Vault and has obtained dynamic database credentials with a lease of 4 hours. Four hours later, the credentials expire, and the application can no longer communicate with the backend database, so the application goes down. What should the developers instruct the application to do to prevent this from happening again while maintaining the same level of security?
Correct Answer:B